Skip to content
OpenAdvisories
Critical ICSA-22-104-03 3 CVEs

Red Lion DA50N

Published Apr 14, 2022 · Updated Apr 14, 2022

Vendor: Red Lion, AutomationDirect Product: DA50N

Summary

Successful exploitation of these vulnerabilities could result in data compromise, data modification, and a denial-of-service condition.

Vulnerabilities 3

  • Critical 9.6
    CVE-2022-1039

    ICSA-22-104-03 Red Lion DA50N

    The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default en…

    Red Lion DA50N
  • High 8.4
    CVE-2022-26516

    ICSA-22-104-03 Red Lion DA50N

    Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deploy…

    Red Lion DA50N
  • Medium 4.6
    CVE-2022-27179

    ICSA-22-104-03 Red Lion DA50N

    A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.

    Red Lion DA50N

Revision history

  1. #1

    ICSA-22-104-03 Red Lion DA50N

References